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FINAL ACTION 

1 . Amendment D, received on 5 May 2010, has been entered into record. In this 
amendment, claims 1 and 12 have been amended. 

2. Supplemental amendment E, received on 9 July 2010, has been entered into 
record. In this amendment, claims 1,12, and 19 have been amended. 

3. Claims 1-10 and 12-19 are presented for examination. 

Response to Arguments 

4. Applicant's arguments with respect to claims 1-10 and 12-19 have been 
considered but are moot in view of the new ground(s) of rejection. 

Claim Objections 

5. Claims 1,12, and 1 9 are objected to because of the following informalities: 

a. In claim 1 , line 6: "prior to a secure electronic object is requested to 
generate" is unclear; 

b. In claim 1 , line 6: "a secure electronic object" is unclear if it relates to "an 
electronic device" (claim 1 , line 2). 

c. In claim 1 2, line 8: "prior to the secure portable object is requested to 
generate" is unclear; 

d. In claim 12, lines 17-18: "subsequent to the calculated pairs of prime 
numbers or values are stored in the memory" is unclear; 
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e. In claim 19, line 4: "prior to an electronic device is requested to generate" 
is unclear. 
Appropriate correction is required. 

Claim Rejections - 35 USC § 101 

6. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

7. Claims 1-10 and 16-18 are rejected under 35 U.S.C. 101 because the claimed 
invention is directed to non-statutory subject matter. 

Claims 1-10 and 16-18 are rejected under 35 U.S.C. 101 as not falling within one 
of the four statutory categories of invention. While the claims recite a series of steps or 
acts to be performed, a statutory "process" under 35 U.S.C. 101 must (1) be tied to 
particular machine, or (2) transform underlying subject matter (such as an article or 
material) to a different state or thing. See page 10 of In Re Bilski 88 USPQ2d 1385. The 
instant claims are neither positively tied to a particular machine that accomplishes the 
claimed method steps nor transform underlying subject matter, and therefore do not 
qualify as a statutory process. The generating electronic keys method including steps 
of calculating, storing, obtaining, retrieving, and verifying is broad enough that the claim 
could be completely performed mentally, verbally or without a machine nor is any 
transformation apparent. It is noted that the preamble of claim 1 indicates that a public- 
key cryptography method uses an electronic device, but the method of generating 
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electronic keys is not tied to a particular machine. Further, the electronic device of the 
preamble is not recited in the body of the claim. 



Claim Rejections - 35 USC § 103 

8. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

9. Claims 1-5, 12, 13, 15, 16, and 19 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Hopkins et al. (US 2005/0190912 A1 and Hopkins hereinafter) in 
view of Hopkins et al. (US 2002/0186837 A1 and Hopkins914 hereinafter). 

As to claim 1 , Hopkins discloses a system and method for pre-computing and storing 

multiple cryptographic keys, the system and method having: 

prior to a secure electronic object is requested to generate a private 
key (i.e. pre-computing values), calculating pairs of prime numbers (p, q) or 
values representative of pairs of prime numbers, this calculation being 
independent of knowledge of a pair of values (e, I) in which e is the public 
exponent and I is the length of the key of the cryptography method (0038, 
lines 6-7), 

storing the calculated pairs of prime numbers or values in a memory 
of the secure electronic object (0038, lines 7-10); 
obtaining values for e and I (0036, lines 2-9); 
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in response to the secure electronic object being requested to 
generate a private key, retrieving a pair of prime numbers (p, q) or a value 
representative of said pair of prime numbers, stored in step A (0038, lines 
10-12); 

calculating a key d to be used by the secure electronic object from 
the retrieved pair (p, q) that is determined to be suitable (0068, lines 1-4). 
Hopkins fails to specifically disclose: 

subsequent to the step of storing the calculated pairs of prime 
numbers or values and the step of retrieving the pair of prime numbers (p, 
q), or the value representative of said pair of prime numbers, verifying the 
following conditions for said pair of prime numbers: 

(i) p-1 and q-1 are prime numbers with the obtained value for e 

(ii) N=p*q is an integer of given length I, 

if the pair (p, q) does not satisfy conditions (i) and (ii), retrieving 
another pair of prime numbers and repeating the verification until a 
retrieved pair is suitable. 

Nonetheless, these features are well known in the art and would have been an obvious 
modification of the teachings disclosed by Hopkins, as taught by Hopkins914. 
Hopkins914 discloses a system and method for generating multiple prime numbers 
using a parallel prime number search algorithm, the system and method having: 
subsequent to the step of storing the calculated pairs of prime 
numbers or values and the step of retrieving the pair of prime numbers (p, 
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q), or the value representative of said pair of prime numbers (01 72, lines 1 - 
3), verifying the following conditions for said pair of prime numbers: 

(i) p-1 and q-1 are prime numbers with the obtained value for e 

(ii) N=p*q is an integer of given length I, 

if the pair (p, q) does not satisfy conditions (i) and (ii), retrieving 
another pair of prime numbers and repeating the verification until a 
retrieved pair is suitable (0052, lines 5-1 1 ; 0053, lines 4-6; 0061 , lines 4-6). 
Given the teaching of Hopkins914, a person having ordinary skill in the art at the time of 
the invention would have readily recognized the desirability and advantages of 
modifying the teachings of Hopkins with the teachings of Hopkins914 by using pre- 
computed primes to determine primes that satisfy certain conditions. Hopkins914 
recites motivation by disclosing that generating large prime numbers for key generation 
simultaneously provides for a fast and efficient primality testing an reduced 
computational effort (0028, lines 1-5). It is obvious that the teachings of Hopkins914 
would have improved the teachings of Hopkins by using pre-computed primes to 
determine primes that satisfy certain conditions in order to produce large primes for key 
generation in a fast and efficient manner. 

As to claim 2, Hopkins discloses: 

wherein step A-1) comprises calculating pairs of prime numbers (p, 
q) without knowledge of the public exponent e or of the length I of the key, 
using a parameter n (i.e. n) which is the product of small prime numbers 
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(i.e. pi, p2, .. ) (0057, line 16), so that each pair (p, q) has a maximum 
probability of being able to correspond to a future pair (e,l) and can make it 
possible to calculate the key d (0068, lines 1-4). 

As to claim 3, Hopkins discloses: 

wherein the calculation of step A-1) also takes account of the fact 

that e has a high probability of forming part of the set {3, 17 2 16 +1} 

(0127, lines 3-5), and using a seed a in the calculation which makes it 
possible to calculate a representative value constituting an image (i.e. prime 
number value) of the pairs (p, q) (0041 , lines 1-4). 

As to claim 4, Hopkins discloses: 

wherein the storage step A-2) comprises storing the image (i.e. 
cryptographic parameters) of the pairs (0035, lines 23-24). 

As to claims 5 and 16, Hopkins discloses: 

wherein step A-1) comprises calculating pairs of prime numbers (p, 
q) for different probable pairs of values (e,l) (0035, lines 5-8). 



As to claim 12, Hopkins discloses: 

communication means for receiving at least one pair of values (e,l) 

(52, Figure 3); 
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a memory for storing results of: calculating pairs of prime numbers 
(p,q) or values representative of pairs of prime numbers, this calculation 
being independent of knowledge of the pair of values (e,l) in which e is a 
public exponent and I is the length of the key of the cryptography method, 
and the calculation being performed prior to the secure portable object is 
requested to generate a private key (0038, lines 6-10); 

a program for calculating a key d from the stored results and 
knowledge of a received pair of values (e,l) (0068, lines 1-4); 

wherein the program comprises instructions that cause a processor 
to perform the following operations to calculate the key d: 

in response to the secure portable object being requested to 
generate a private key, retrieving a pair of prime numbers (p, q), or a value 
representative of said pair of prime numbers, stored in the memory (0038, 
lines 10-12); 

calculating the key d from the retrieved pair (p, q) that is determined 
to be suitable (0068, lines 1-4). 
Hopkins fails to specifically disclose: 

subsequent to the calculated pairs of prime numbers or values are 
stored in the memory and the step of retrieving the pair of prime numbers 
(p, q) or the value representative of said pair of prime numbers, verifying 
the following conditions for said pair of prime numbers; 

(i) p-1 and q-1 are prime numbers with the obtained value for e and 
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(ii) N=p*q is an integer of given length I, 
if the pair (p, q) does not satisfy conditions (i) and (ii), retrieve 
another pair of prime numbers stored in the memory and repeat the 
verification until a retrieved pair is suitable. 
Nonetheless, these features are well known in the art and would have been an obvious 
modification of the teachings disclosed by Hopkins, as taught by Hopkins914. 
Hopkins914 discloses: 

subsequent to the calculated pairs of prime numbers or values are 
stored in the memory and the step of retrieving the pair of prime numbers 
(p, q) or the value representative of said pair of prime numbers (0172, lines 
1-3), verifying the following conditions for said pair of prime numbers; 

(i) p-1 and q-1 are prime numbers with the obtained value for e and 

(ii) N=p*q is an integer of given length I, 

if the pair (p, q) does not satisfy conditions (i) and (ii), retrieve 
another pair of prime numbers stored in the memory and repeat the 
verification until a retrieved pair is suitable (0052, lines 5-11; 0053, lines 4-6; 
0061, lines 4-6). 

Given the teaching of Hopkins914, a person having ordinary skill in the art at the time of 
the invention would have readily recognized the desirability and advantages of 
modifying the teachings of Hopkins with the teachings of Hopkins914 by finding pairs of 
prime numbers that satisfy certain conditions. Please refer to the motivation recited 
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above with respect to claim 1 as to why it is obvious to apply the teachings of 
Hopkins914 to the teachings of Hopkins. 

As to claim 13, Hopkins discloses: 

a calculation means configured to calculate said results stored in 
memory, the calculation of said results being separate in time from the 
calculation of the key d (0042, lines 2-4; 0068, lines 1-4). 

As to claim 15, Hopkins discloses: 

where said object is a chip card (0094, lines 1-9, 13-15). 

As to claim 19, Hopkins discloses: 

prior to an electronic device is requested to generate a private key, in 
a computing resource (i.e. prime generating unit) external to said electronic 
device (i.e. server computing system) (44, 50, 52, Figure 2): 

calculating pairs of prime numbers (p, q), or values representative of 
said pairs of prime numbers, independently of the values for e and I (0038, 
lines 6-7), and 

storing the pairs of prime numbers, or values, in a memory of the 
electronic device (0038, lines 7-10); 
in said electronic device: 
obtaining values for e and I (0036, lines 2-9); 
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in response to the electronic device being requested to generate a 
private key, retrieving a pair of prime numbers (p, q), or a value 
representative of said pair of prime numbers, from said memory (0038, lines 
10-12); 

calculating a key d in accordance with the value for e and a retrieved 
pair that is determined to meet the conditions (0068, lines 1-4). 
Hopkins fails to specifically disclose: 

subsequent to the step of storing the calculated pairs of prime 
numbers or values and the step of retrieving the pair of prime numbers (p, 
q), or the value representative of said pair of prime numbers, verifying the 
following conditions for said pair of prime numbers: 

(i) p-1 and q-1 are prime numbers with respect to the value for e and 

(ii) N=p*q is an integer of length I, 

if the pair (p, q) does not satisfy conditions (i) and (ii), retrieving 
another pair of prime numbers from said memory and repeating the 
verification steps until a retrieved pair is determined to meet the 
conditions. 

Nonetheless, these features are well known in the art and would have been an obvious 
modification of the teachings disclosed by Hopkins, as taught by Hopkins914. 
Hopkins914 discloses: 

subsequent to the step of storing the calculated pairs of prime 
numbers or values and the step of retrieving the pair of prime numbers (p, 
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q), or the value representative of said pair of prime numbers (01 72, lines 1 - 
3), verifying the following conditions for said pair of prime numbers: 

(i) p-1 and q-1 are prime numbers with respect to the value for e and 

(ii) N=p*q is an integer of length I, 

if the pair (p, q) does not satisfy conditions (i) and (ii), retrieving 
another pair of prime numbers from said memory and repeating the 
verification steps until a retrieved pair is determined to meet the conditions 

(0052, lines 5-1 1 ; 0053, lines 4-6; 0061 , lines 4-6). 
Given the teaching of Hopkins914, a person having ordinary skill in the art at the time of 
the invention would have readily recognized the desirability and advantages of 
modifying the teachings of Hopkins with the teachings of Hopkins914 by finding pairs of 
prime numbers that satisfy certain conditions. Please refer to the motivation recited 
above with respect to claim 1 as to why it is obvious to apply the teachings of 
Hopkins914 to the teachings of Hopkins. 

10. Claims 6, 8-10, 14, 17, and 18 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Hopkins in view of Hopkins914 as applied to claims 1, 3, 5, and 13 
above, and further in view of Futa et al. (US Patent 7,130,422 B2 and Futa hereinafter). 
As to claim 6, Hopkins in view of Hopkins914 fails to specifically disclose: 

wherein the parameter n contains the values 3, 17. 
Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Hopkins in view of Hopkins914, as taught by 
Futa. 
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Futa discloses a system and method for prime number generation for information 
security, the system and method having: 

wherein the parameter n (i.e. R) contains the values 3, 17 (i.e. small 
primes, l_i, L 2 ,...) (col. 9, line 43; col. 10, line 8). The examiner asserts that 
because Futa discloses that the parameter n consists of small prime numbers, 
then the numbers 3 and 17 may be included because they can be considered 
small prime numbers. 
Given the teaching of Futa, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Hopkins in view of Hopkins914 with the teachings of Futa by using 
small primes. Futa recites motivation by disclosing that the computational complexity of 
generating a 16 bit or 32 bit prime is much smaller than generating a 64 bit prime (col. 
5, lines 58-60). It is obvious that the teachings of Futa would have improved the 
teachings of Hopkins in view of Hopkins914 by using a parameter containing small 
primes in order to reduce computational complexity. 

As to claims 8, 14 and 17, Hopkins discloses: 

1) calculating parameters v and w from the following relations and 
storing them: 
v=V2 2lo - 1 /n 

w=2 2l °/ II 

in which n (i.e. n) is stored and corresponds to the product of the f smallest 
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prime numbers, f (i.e. k) being selected such that n< 2 Bo (i.e. 2 L ) (0057, line 
16; 0062, line 4); 

3) selecting and storing a prime number k of short length compared 

to the length of an RSA key within the range of integers {0 n-1}, (k, n) 

being co-prime (0057, lines 10-12). 

Hopkins in view of Hopkins914 fails to specifically disclose: 

2) selecting a number j within the range of integers {v w-1} and 

calculating l=jn; 

4) calculating q; 

5) verifying that q is a prime number, if q is not a prime number then: 

a) taking a new value for k using the following relation: k=a k (mod n); a 
belonging to the multiplicative group Z* n of integers modulo II; 

b) repeating the method from step 4). 

Nonetheless, these features are well known in the art and would have been an obvious 
modification of the teachings disclosed by Hopkins in view of Hopkins914, as taught by 
Futa. 

Futa discloses: 

2) selecting a number j within the range of integers {v w-1} and 

calculating l=jn (i.e. I=R, j=R', n =L1x|_2x...) (col. 9, lines 54-56; col. 10, line 8); 

4) calculating q (i.e. P a /P b ) =k+l (col. 8, lines 56-57, 62-64; col. 10, lines 
10,41-43); 
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5) verifying that q is a prime number, if q is not a prime number then: 

a) taking a new value for k using the following relation: k=a k (mod n); a 
belonging to the multiplicative group Z* n of integers modulo II; 

b) repeating the method from step 4) (col. 10, lines 25-28). 

Given the teaching of Futa, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Hopkins in view of Hopkins914 with the teachings of Futa by calculating 
parameters that are used to determine prime numbers for an RSA-type cryptographic 
system. Hopkins recites motivation by disclosing that the prime numbers must be 
distinct and suitable for use in the multi-prime cryptographic system (0058, lines 6-9). It 
is disclosed that the composite number n provides a modulus for encoding and 
decoding operations (0058, lines 1-2) and that the prime numbers must fall in a certain 
range, which, alternatively, ensures that the prime numbers and exponent are relatively 
prime (0063, lines 1-4). It is obvious that the teachings of Futa would have improved 
the teachings of Hopkins in view of Hopkins914 by calculating and using parameters for 
determining prime numbers in such a way that would ensure distinctness and suitability 
in the system. 

As to claim 9, Hopkins discloses: 

wherein the numbers j and k can be generated from the seed a 
stored in memory (0041, lines 1-6). 
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As to claims 10 and 18, Hopkins in view of Hopkins914 fails to disclose: 

where the prime number p is generated by repeating all the above 
sub-steps while replacing q with p and replacing l D with l-l G . 

Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Hopkins in view of Hopkins914, as taught by 
Futa. 

Futa discloses: 

where the prime number p is generated by repeating all the above 
sub-steps while replacing q with p and replacing l Q (i.e. L enq ) with l-l 0 (i.e. 

Lenq') (col. 8, lines 55-57, 61-64; col. 9, lines 19-25). The examiner asserts that 
because Futa discloses that the prime numbers p a and p b are generated using 
the same unit, then they can be said to be generated using the same steps. 
Given the teaching of Futa, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Hopkins in view of Hopkins914 with the teachings of Futa by calculating 
parameters that are used to determine prime numbers for an RSA-type cryptographic 
system. Please refer to the motivation recited above with respect to claims 8, 14, and 
17 as to why it is obvious to apply the teachings of Futa to the teachings of Hopkins in 
view of Hopkins914. 



Application/Control Number: 10/518,639 Page 17 

Art Unit: 2431 

1 1 . Claim 7 is rejected under 35 U.S.C. 103(a) as being unpatentable over Hopkins 
in view of Hopkins914 as applied to claim 1 above, and further in view of Matyas (US 
Patent 4,736,423). 

As to claim 7, Hopkins in view of Hopkins914 fails to specifically disclose: 

wherein step A-1) comprises an operation of compressing the 
calculated pairs (p,q) and step A-2) comprises storing the compressed 
values thus obtained. 

Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Hopkins in view of Hopkins914, as taught by 
Matyas. 

Matyas discloses a system and method for reducing RSA crypto variable storage, the 
method having: 

wherein step A-1) comprises an operation of compressing the 
calculated pairs (p,q) and step A-2) comprises storing the compressed 
values thus obtained (col. 8, lines 65-68; col. 9, lines 1-2). 
Given the teaching of Matyas, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Hopkins in view of Hopkins91 4 with the teachings of Matyas by 
providing for compression of the numbers and storing the result. Matyas recites 
motivation by disclosing that efficiently storing parameters required for public key 
algorithms (through a method such as compression) would allow the system to be 
implemented where storage is limited (such as a magnetic strip card) (col. 3 lines 55- 
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58). It is obvious that the teachings of Matyas would have improved the teachings of 
Hopkins in view of Hopkins914 by compressing parameters used in public key 
algorithms in order to save space so that the algorithm may be used in conditions where 
the storage is limited. 

Prior Art Made of Record 

12. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

a. Collins et al. (US Patent 5,848,159) discloses a system and method for 
public key cryptography. 

b. Dottax et al. (US 2010/0128869 A1) discloses a system and method for 
executing a cryptographic calculation. 

c. Furukawa (US Patent 7,567,672 B2) discloses a system and method for 
cryptographic communication. 

d. Paillier (US 2001/0036267 A1 ) discloses a system and method for 
generating electronic keys from integer numbers. 

e. Patel et al. (US Patent 6,192,474 B1) discloses a system and method for 
establishing a key. 

f. Pohja (US 2008/01 23842 A1 ) discloses a system and method for 
associating a cryptographic public key with data. 

g. Raji (US Patent 6,868,160 B1) discloses a system and method for 
providing secure sharing of electronic data. 
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Conclusion 

13. Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Sarah Su whose telephone number is (571) 270-3835. 
The examiner can normally be reached on Monday through Friday 7:30AM-5:00PM 
EST.. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, William Korzuch can be reached on (571) 272-7589. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/William R. Korzuch/ /Sarah Su/ 

Supervisory Patent Examiner, Art Unit 2431 Examiner, Art Unit 2431 



